Updating a State of a Client Device Based on an Event That Includes a Subset of Records That Identify Binaries Associated with the Client Device

1. A computing system comprising: a processing system; and a memory that stores computer-executable instructions that are executable by the processing system to at least: store an initial state of a client device, which is coupled to the computing system, in the memory, the initial state defined by a first plurality of records that identify a first plurality of respective binaries that are associated with the client device at a first time instance; receive a plurality of events from the client device at a plurality of respective time instances, the plurality of events including respective subsets of a second plurality of records, the second plurality of records identifying a second plurality of respective binaries that are associated with the client device at a second time instance that temporally follows the first time instance; and based at least on receipt of each of the plurality of events, perform the following: parse the respective event to identify the respective subset of the second plurality of records that is included in the respective event; and trigger a respective incremental update of a state of the client device without regard to whether another event of the plurality of events has been received from the client device by replacing a respective portion of the first plurality of records, which corresponds to the respective subset of the second plurality of records, with the respective subset of the second plurality of records.

2. The computing system of claim 1, wherein the plurality of events is a plurality of stateless events.

3. The computing system of claim 1, wherein the first plurality of records identify the first plurality of respective binaries that are stored on the client device at the first time instance; and wherein the second plurality of records identify the second plurality of respective binaries that are stored on the client device at the second time instance.

4. The computing system of claim 1, wherein the computer-executable instructions are executable by the processing system to: receive the plurality of events from the client device via a unidirectional link.

5. The computing system of claim 1, wherein a first event of the plurality of events includes a first subset of the second plurality of records in which the records are ordered; and wherein the computer-executable instructions are executable by the processing system to: review a first beginning record that begins the first subset and a second beginning record that begins the next sequential event after the first event; and determine the records in the first subset that are between the first beginning record and the second beginning record, based at least on reviewing the first beginning record and the second beginning record, without reviewing the records in the first subset that are between the first beginning record and the second beginning record.

6. The computing system of claim 1, wherein each portion of the first plurality of records is replaced with the respective subset of the second plurality of records regardless of whether another event, other than the event that includes the respective subset of the second plurality of records, in the plurality of events has been received from the client device.

7. The computing system of claim 1, wherein the computer-executable instructions are executable by the processing system to: not wait to replace each portion of the first plurality of records with the respective subset of the second plurality of records until another event, other than the event that includes the respective subset of the second plurality of records, is received from the client device.

8. The computing system of claim 1, wherein the computer-executable instructions are executable by the processing system further to: discard each subset of the second plurality of records based at least on the respective event being parsed.

9. A method comprising: storing an initial state of a client device, the initial state defined by a first plurality of records that identify a first plurality of respective binaries that are associated with the client device at a first time instance; receiving a first event of a plurality of events from the client device, each event of the plurality of events, except for a last event of the plurality of events, including a respective subset of a second plurality of records and a beginning record of a next sequential event of the plurality of events, the last event of the plurality of events including a respective subset of the second plurality of records, the second plurality of records identifying a second plurality of respective binaries that are associated with the client device at a second time instance that temporally follows the first time instance; identifying a first subset of the second plurality of records that is included in the first event by parsing the first event; and generating an updated state of the client device by replacing a first portion of the first plurality of records, which corresponds to the first subset of the second plurality of records, with the first subset of the second plurality of records in the memory.

10. The method of claim 9, wherein the plurality of events is a plurality of stateless events.

11. The method of claim 9, wherein the first plurality of records identify the first plurality of respective binaries that are installed on the client device at the first time instance; and wherein the second plurality of records identify the second plurality of respective binaries that are installed on the client device at the second time instance.

12. The method of claim 9, wherein generating the updated state of the client device comprises: generating the updated state of the client device without regard to an index event.

13. The method of claim 9, wherein receiving the first event comprises: receiving the first event from the client device via a unidirectional link.

14. The method of claim 9, wherein the records in the first subset are ordered in the first event; and wherein parsing the first event comprises: reviewing a first beginning record that begins the first subset and a second beginning record that begins the next sequential event after the first event; and determining the records in the first subset that are between the first beginning record and the second beginning record, based at least on reviewing the first beginning record and the second beginning record, without reviewing the records in the first subset that are between the first beginning record and the second beginning record.

15. The method of claim 9, wherein the records in the first subset are not ordered in the first event; and wherein parsing the first event comprises: reviewing each record in the first event to determine an order in which the records in the first subset of the second plurality of records are to be included in the updated state of the client device.

16. The method of claim 9, wherein generating the updated state of the client device comprises: replacing the first portion of the first plurality of records with the first subset of the second plurality of records regardless of whether another event, other than the first event, in the plurality of events has been received from the client device.

17. The method of claim 9, wherein replacing the first portion of the first plurality of records comprises: not waiting to replace the first portion of the first plurality of records with the first subset of the second plurality of records until another event is received from the client device.

18. The method of claim 9, further comprising: receiving a second event of the plurality of events from the client device, wherein the first event includes the beginning record of the second event; and identifying a second subset of the second plurality of records that is included in the second event by parsing the second event; wherein generating the updated state of the client device further comprises: replacing a second portion of the first plurality of records, which corresponds to the second subset of the second plurality of records, with the second subset of the second plurality of records.

19. The method of claim 18, further comprising: determining that the second subset of the second plurality of records is to be consecutive with the first subset of the second plurality of records based at least on the first event including the beginning record of the second event; wherein generating the updated state of the client device further comprises: causing the second subset of the second plurality of records to be consecutive with the first subset of the second plurality of records in the updated state of the client device based at least on a determination that the second subset of the second plurality of records is to be consecutive with the first subset of the second plurality of records.

20. A computer program product comprising a computer-readable storage medium having instructions recorded thereon for enabling a processor-based system to perform operations, the operations comprising: storing an initial state of a client device, the initial state defined by a first plurality of records that identify a first plurality of respective binaries that are associated with the client device at a first time instance; receiving a plurality of events from the client device at a plurality of respective time instances, the plurality of events including respective subsets of a second plurality of records, the second plurality of records identifying a second plurality of respective binaries that are associated with the client device at a second time instance that temporally follows the first time instance; and based at least on receipt of each of the plurality of events, performing the following: parsing the respective event to identify the respective subset of the second plurality of records that is included in the respective event; and triggering a respective incremental update of a state of the client device without regard to whether another event of the plurality of events has been received from the client device by replacing a respective portion of the first plurality of records, which corresponds to the respective subset of the second plurality of records, with the respective subset of the second plurality of records.